CVE-2018-20784
Fixed in a distro release EPSS 4%
In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in update_blocked_averages) or possibly have unspecified other impact by inducing a high load.
Products: linux_kernel, canonical ubuntu_linux, redhat enterprise_linux, redhat enterprise_linux_for_real_time
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 4.19.16-1 |
| Debian 13 | linux | 4.19.16-1 |
| Debian 14 | linux | 4.19.16-1 |
| Red Hat Enterprise Linux 8 | bpftool | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | bpftool-debuginfo | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-abi-whitelists | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-core | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debug | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debug-core | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debug-debuginfo | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debug-devel | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debug-modules | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debug-modules-extra | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo-common-aarch64 | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo-common-ppc64le | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo-common-s390x | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo-common-x86_64 | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-devel | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-doc | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-modules | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-modules-extra | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-rt | 0:4.18.0-80.7.1.rt9.153.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-rt-core | 0:4.18.0-80.7.1.rt9.153.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug | 0:4.18.0-80.7.1.rt9.153.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug-core | 0:4.18.0-80.7.1.rt9.153.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug-debuginfo | 0:4.18.0-80.7.1.rt9.153.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug-devel | 0:4.18.0-80.7.1.rt9.153.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug-kvm | 0:4.18.0-80.7.1.rt9.153.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug-kvm-debuginfo | 0:4.18.0-80.7.1.rt9.153.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug-modules | 0:4.18.0-80.7.1.rt9.153.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-rt-debug-modules-extra | 0:4.18.0-80.7.1.rt9.153.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-rt-debuginfo | 0:4.18.0-80.7.1.rt9.153.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-rt-debuginfo-common-x86_64 | 0:4.18.0-80.7.1.rt9.153.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-rt-devel | 0:4.18.0-80.7.1.rt9.153.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-rt-kvm | 0:4.18.0-80.7.1.rt9.153.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-rt-kvm-debuginfo | 0:4.18.0-80.7.1.rt9.153.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-rt-modules | 0:4.18.0-80.7.1.rt9.153.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-rt-modules-extra | 0:4.18.0-80.7.1.rt9.153.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-tools | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-tools-debuginfo | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-tools-libs | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-tools-libs-devel | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-core | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-debuginfo | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-devel | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-modules | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-modules-extra | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | perf | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | perf-debuginfo | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | python3-perf | 0:4.18.0-80.7.1.el8_0 |
| Red Hat Enterprise Linux 8 | python3-perf-debuginfo | 0:4.18.0-80.7.1.el8_0 |
| SUSE HPE Helion OpenStack 8 | kernel-default | 4.4.180-94.164.3 |
| SUSE HPE Helion OpenStack 8 | kernel-source | 4.4.180-94.164.2 |
| SUSE HPE Helion OpenStack 8 | kernel-syms | 4.4.180-94.164.2 |
| SUSE HPE Helion OpenStack 8 | kgraft-patch-SLE12-SP3_Update_45 | 1-4.3.2 |
| SUSE Linux Enterprise High Availability Extension 12 SP3 | kernel-default | 4.4.180-94.164.3 |
| SUSE Linux Enterprise Server 12 SP2-BCL | kernel-default | 4.4.121-92.205.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | kernel-default | 4.4.121-92.208.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | kernel-default | 4.4.121-92.175.2 |
| SUSE Linux Enterprise Server 12 SP2-BCL | kernel-source | 4.4.121-92.175.2 |
| SUSE Linux Enterprise Server 12 SP2-BCL | kernel-source | 4.4.121-92.208.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | kernel-source | 4.4.121-92.205.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | kernel-syms | 4.4.121-92.208.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | kernel-syms | 4.4.121-92.205.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | kernel-syms | 4.4.121-92.175.2 |
| SUSE Linux Enterprise Server 12 SP3-BCL | kernel-default | 4.4.180-94.164.3 |
| SUSE Linux Enterprise Server 12 SP3-BCL | kernel-source | 4.4.180-94.164.2 |
| SUSE Linux Enterprise Server 12 SP3-BCL | kernel-syms | 4.4.180-94.164.2 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | kernel-default | 4.4.180-94.164.3 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | kernel-source | 4.4.180-94.164.2 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | kernel-syms | 4.4.180-94.164.2 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | kgraft-patch-SLE12-SP3_Update_45 | 1-4.3.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | kernel-default | 4.4.180-94.164.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | kernel-source | 4.4.180-94.164.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | kernel-syms | 4.4.180-94.164.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | kgraft-patch-SLE12-SP3_Update_45 | 1-4.3.2 |
| SUSE OpenStack Cloud 8 | kernel-default | 4.4.180-94.164.3 |
| SUSE OpenStack Cloud 8 | kernel-source | 4.4.180-94.164.2 |
| SUSE OpenStack Cloud 8 | kernel-syms | 4.4.180-94.164.2 |
| SUSE OpenStack Cloud 8 | kgraft-patch-SLE12-SP3_Update_45 | 1-4.3.2 |
| SUSE OpenStack Cloud Crowbar 8 | kernel-default | 4.4.180-94.164.3 |
| SUSE OpenStack Cloud Crowbar 8 | kernel-source | 4.4.180-94.164.2 |
| SUSE OpenStack Cloud Crowbar 8 | kernel-syms | 4.4.180-94.164.2 |
| SUSE OpenStack Cloud Crowbar 8 | kgraft-patch-SLE12-SP3_Update_45 | 1-4.3.2 |
| Ubuntu 16.04 LTS | linux | 4.4.0-170.199 |
| Ubuntu 16.04 LTS | linux-aws | 4.4.0-1099.110 |
| Ubuntu 16.04 LTS | linux-aws-hwe | 4.15.0-1047.49~16.04.1 |
| Ubuntu 16.04 LTS | linux-azure | 4.15.0-1056.61 |
| Ubuntu 16.04 LTS | linux-gcp | 4.15.0-1041.43 |
| Ubuntu 16.04 LTS | linux-hwe | 4.15.0-60.67~16.04.1 |
| Ubuntu 16.04 LTS | linux-kvm | 4.4.0-1063.70 |
| Ubuntu 16.04 LTS | linux-oracle | 4.15.0-1022.25~16.04.1 |
| Ubuntu 16.04 LTS | linux-raspi2 | 4.4.0-1126.135 |
| Ubuntu 16.04 LTS | linux-snapdragon | 4.4.0-1130.138 |
| Ubuntu 18.04 LTS | linux | 4.15.0-60.67 |
| Ubuntu 18.04 LTS | linux-aws | 4.15.0-1047.49 |
| Ubuntu 18.04 LTS | linux-azure | 5.0.0-1014.14~18.04.1 |
| Ubuntu 18.04 LTS | linux-gcp | 4.15.0-1042.45 |
| Ubuntu 18.04 LTS | linux-gke-4.15 | 4.15.0-1041.43 |
| Ubuntu 18.04 LTS | linux-hwe | 5.0.0-23.24~18.04.1 |
| Ubuntu 18.04 LTS | linux-kvm | 4.15.0-1043.43 |
| Ubuntu 18.04 LTS | linux-oem | 4.15.0-1056.65 |
| Ubuntu 18.04 LTS | linux-oracle | 4.15.0-1022.25 |
| Ubuntu 18.04 LTS | linux-raspi2 | 4.15.0-1044.47 |
| Ubuntu 18.04 LTS | linux-snapdragon | 4.15.0-1062.69 |
| Ubuntu 20.04 LTS | linux-azure-fde | no fix |
| Ubuntu 20.04 LTS | linux-gke | no fix |
| Ubuntu 20.04 LTS | linux-riscv | no fix |
| Ubuntu 22.04 LTS | linux-intel-iot-realtime | no fix |
| Ubuntu 22.04 LTS | linux-realtime | no fix |
| Ubuntu 22.04 LTS | linux-riscv | no fix |
| Ubuntu 24.04 LTS | linux-raspi-realtime | no fix |
| Ubuntu Pro 14.04 LTS | linux-aws | 4.4.0-1059.63 |
| Ubuntu Pro 14.04 LTS | linux-azure | 4.15.0-1059.64~14.04.1 |
| Ubuntu Pro 14.04 LTS | linux-lts-xenial | 4.4.0-170.199~14.04.1 |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | 4.4.0-1026.31 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | 4.15.0-2018.18 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | 4.15.0-2006.7 |
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | no fix |
| Ubuntu Pro FIPS 18.04 LTS | linux-aws-fips | no fix |
| Ubuntu Pro FIPS 18.04 LTS | linux-azure-fips | no fix |
| Ubuntu Pro FIPS 18.04 LTS | linux-gcp-fips | no fix |